Security Levels - New UI

SECURITY  Administrator

NAVIGATION  New UI > Setup > Security Levels

Enter a name for the security level.

Enter a description for the security level.

When you are finished creating the security level, click Create Security Level. Once the security level has been saved, you will be redirected to the Security Levels page.

If you do not wish to save the security level, click Cancel.

When you create a new security level, we recommend that you assign it to yourself first to see if it restricts or allows everything you want it to. Testing a security level is important to ensure that users with that security level are able to access the tools or information they require to perform their daily tasks. It is also equally important to ensure that they don't have access to anything they shouldn't. To learn how you can change security levels to test them, refer to Switching security levels.

IMPORTANT  If you give third-party users (such as your customers) access to the account, ensure that the security level restrictions meet your internal data security requirements.

You can create a security level that grants remote takeover access in the New UI to devices within selected device groups without giving access to the devices' sites as well. This configuration may be useful in scenarios where users, technicians, or third-party software providers need to access one or more devices in one or more sites in order to provide remote support.

Configure the security level in the following way:

• Device visibility: Only enable Device Groups, and add device groups that members of this security level should be able to access.
• Permissions:
  • If the New UI is set as the default interface for a user, enable Global with View permission for Dashboard. This is to prevent an Access denied error message when they log in to their account. Set None permission for all other areas within Global.
  • Enable Sites with View permission for all areas.
• Remote control tools: Enable all tools.
• Membership: Add users that should be members of this security level.

The configuration described above allows members of this security level to access a restricted version of the New UI.

• Users will be able to see and export a list of devices that are included in the selected device groups.
• Users will be able to use remote actions and the Agent Browser tools.
• Users will not be able to access jobs, the ComStore, components, filters, policies, and reports.

NOTE  Users will not be able to see alerts associated with devices as that would also require Sites to be enabled under Device Visibility.

Navigate to the Security Levels page by following the navigation path described above.

The table displays the following information:

The table density is set to condensed theme by default. To change it to relaxed theme, click the density toggle icon. The selection will persist across all pages.

The number of results displayed can be specified by selecting the desired number from the pagination control. This selection will persist the next time the page is accessed.

Action buttons

The action buttons are grayed out if no row is selected. The selection box allows you to select one row at a time. The table below lists all available action buttons.

Action Button	Description
Copy	Allows you to copy an already existing security level. You can then modify the security level details of the copy as necessary. The copy will be named Copy of [existing security level's name] by default. Refer to Creating a security level.
Delete	Deletes the selected security level upon confirmation. When you click the Delete action button, a dialog box appears where you need to perform the following before clicking Delete again: • From the drop-down list, select a replacement security level for the security level you wish to delete. Note that the first security level that appears in the drop-down list is Administrator; however, you can select any of the existing security levels listed below Administrator. • Enter the name of the security level you wish to delete to confirm this action. IMPORTANT  The following actions are performed when a security level is deleted: • Any users that are currently a member of the security level you are deleting will be added as members to the replacement security level. • Any existing jobs or policy targets currently linked to the security level you are deleting will be assigned to the replacement security level. If new or multiple security levels are required to replace the security level you are deleting, or you need to update an existing security level first to use it as a replacement, click Cancel in the dialog box and make the necessary changes before deleting this security level. Refer to Creating a security level and Editing a security level.

Navigate to the Security Levels page by following the navigation path described above. You can edit a security level in the following ways:

• To update the details of a security level, click its name in the list. Refer to Creating a security level.
• To delete a security level, select it from the list and click Delete. Refer to Delete.
• To copy a security level, select it from the list and click Copy. Refer to Copy.

If a user has more than one security level assigned, they can change their security level in the web interface or in the Agent Browser.

New UI

Refer to Current Security Level in My Settings.

Legacy UI

1. In the upper-right corner of the Web Portal, click your current security level to see a list of available security levels.
   

2. Select the required security level.
3. The page will automatically refresh and the selected security level will be applied.

Switching your security level will only apply to your current session. Your default security level will be used the next time you log in to your account.

Agent Browser

1. On the local device where Datto RMM is installed, right-click the Datto RMM Agent icon in the system tray and click Open.
2. Log in with your credentials.
3. Click the first menu option in the upper-left corner of the Agent Browser.
4. Hover over Security Level and select the required security level from the list.
   

5. You will be logged out of the Agent automatically.
6. Log back in to be able to use the selected security level.

In this scenario, one of your customers has an internal IT department and will use your RMM to service their devices. The template is configured the following way:

Name: Internal IT (Template)

Description: Template for internal IT team to access their own devices.

Configuration - Device Visibility:

Configuration - Permissions:

Remote control tools: All tools are enabled except LAN Deploy and Notes.

Membership: No users are added. Add users that should be members of this security level.

In this scenario, your technicians have different access privileges based on role. This security level is suitable for screensharing and basic access. The template is configured the following way:

Name: Tier 1 Helpdesk (Template)

Description: Template for your Tier 1 or Helpdesk staff. This security level permits members to remotely control devices with limited other access.

Configuration - Device Visibility:

Configuration - Permissions:

Remote control tools: Chat, Quick Jobs, Screen Share, Screenshot, Task Manager, Thumbnail Screen, and Web Remote are enabled. The rest of the tools are disabled.

Membership: No users are added. Add users that should be members of this security level.

In this scenario, you have non-technical staff who need access to device information only. The template is configured the following way:

Name: Account Manager/Sales/Non-Technical (Template)

Description: Template for sales or non-technical staff. This security level permits members to view device information only with no remote control to devices.

Configuration - Device Visibility:

Configuration - Permissions:

Remote control tools: All tools are disabled.

Membership: No users are added. Add users that should be members of this security level.